General
- Target 2026-07-10_00e540646ecc1b7e2ae7b65b2ba61338_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.7MB
- Sample260710-22tlsagy2z
- SHA256 a74e6207d1525ea4d505fc7fb9546828e51a2d15cabc412ec8f949fec93fee23
- MD5 00e540646ecc1b7e2ae7b65b2ba61338
- SHA1 1b3823b352f1e6a85814bf227250c0b474629f43
- SHA512 3e69139a109a629dea4021750a4ce24503f5611992471822ed5cbcbcefd0efe32a2650e8267e7d45901e2da80cbd144c4907e3c625179f84181e066c72f3b492
- SSDEEP 393216:FtnWuRFqsm8JV8OuO3h9UHbszLRYXMCHWUjXXcuI3/PGTAI:FhmB8J2IdzLaXMb8XsH/O7
- TLSH T1C7E63318D6E003EAE537813DEED269A5D5F5303147B2C6DF1BA857B7AE372A1083E205
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-10_00e540646ecc1b7e2ae7b65b2ba61338_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_00e540646ecc1b7e2ae7b65b2ba61338_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_00e540646ecc1b7e2ae7b65b2ba61338_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.7MB
- SHA256 a74e6207d1525ea4d505fc7fb9546828e51a2d15cabc412ec8f949fec93fee23
- MD5 00e540646ecc1b7e2ae7b65b2ba61338
- SHA1 1b3823b352f1e6a85814bf227250c0b474629f43
- SHA512 3e69139a109a629dea4021750a4ce24503f5611992471822ed5cbcbcefd0efe32a2650e8267e7d45901e2da80cbd144c4907e3c625179f84181e066c72f3b492
- SSDEEP 393216:FtnWuRFqsm8JV8OuO3h9UHbszLRYXMCHWUjXXcuI3/PGTAI:FhmB8J2IdzLaXMb8XsH/O7
- TLSH T1C7E63318D6E003EAE537813DEED269A5D5F5303147B2C6DF1BA857B7AE372A1083E205
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL